SOC Deployment Engineer

Phoenix enables digital transformation across the UK public sector, empowering organisations to innovate with cloud and hybrid infrastructures, data, AI, security and collaboration technologies.

We are now hiring a SOC Deployment Engineer to join our Security Operations Centre (SOC) and support the delivery of our managed security services. This role will focus on the deployment, configuration and optimisation of security tooling, helping ensure customer environments are onboarded effectively and monitored securely.

Working closely with SOC Analysts, Engineers and customers, you will support the implementation of SIEM and SOAR technologies, maintain SOC infrastructure and contribute to the ongoing improvement of our security operations capabilities.

What will you be doing?

• Design, deploy and support SIEM solutions to meet customer security requirements.
• Work with customers and internal stakeholders to gather requirements and support onboarding activities.
• Configure and fine-tune SIEM platforms to optimise performance, visibility and detection capability.
• Support the development and deployment of SOAR playbooks to streamline incident response processes.
• Maintain the availability and performance of SOC infrastructure, including servers, networks and security appliances.
• Configure and optimise log ingestion pipelines and security tool integrations.
• Manage SOC ticket queues and ensure service-level agreements are achieved.
• Ensure incidents are accurately logged, tracked and documented.
• Support the ongoing development and improvement of managed security services.
• Collaborate with analysts, engineers and service teams to improve operational effectiveness.
• Contribute to security tooling enhancements, process improvements and operational standards.

What are we looking for?

• Experience designing, deploying and supporting SIEM solutions, ideally Microsoft Sentinel.
• Experience working with Microsoft Azure environments.
• Good understanding of SOC operations and managed security services.
• Knowledge of security technologies, threat detection and security monitoring.
• Strong understanding of networking and communication protocols including HTTP, DNS and TCP/UDP.
• Understanding of malware techniques, persistence mechanisms and threat actor behaviours.
• Experience with scripting or automation languages such as PowerShell, Python, Bash or similar.
• Experience working with virtualisation technologies such as VMware.